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WHAT IS CLAIMED IS: 

1 . A method for accessing information in a memory, comprising: 
providing virtual address information to a memory management unit; 

obtaining, from the memory management unit, a key tag and physical address information 
corresponding to the virtual address information; 

retrieving a secret key using the key tag when it is determined that a memory location 
corresponding to the physical address information is protected; and 

decrypting information read from the memory location using the secret key. 

2. The method of claim 1 , the retrieving comprising: 

looking up the secret key in a secret key table using the key tag based on a determination 
that the memory location is protected. 

3 . The method of claim 1 , further comprising: 

writing unencrypted data to the memory location based on a determination that the 
memory location is unprotected. 

4. The method of claim 1, further comprising: 

reading unencrypted data from the memory location based on a determination that the 
memory location is unprotected. 
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5. The method of claim 1, further comprising: 

executing an unencrypted instruction from the memory location based on a determination 
that the memory location is unprotected. 
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The method of claim 1, wherein the decrypted information is an instruction, 



further comprising: 

executing the instruction. 



7. 



The method of claim 1, wherein the decrypted information is data. 



8 . The method of claim 1 , further comprising: 

encrypting data written to the first memory location using the secret key. 

9. A method for accessing information in a memory, comprising: 
providing a virtual address to a memory management unit; 

obtaining a key tag and a physical address corresponding to the virtual address from the 

memory management unit; 

accessing a secret key in a secret key table using the key tag; and 

decrypting information read from a memory location corresponding to the physical 

address using the secret key. 
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10. A method for accessing information in a memory, comprising: 

receiving a virtual address from a processor; 

retrieving a key tag and a physical address corresponding to the virtual address; and 
providing the key tag and the physical address to the processor, wherein a secret key 

associated with the key tag is used to decrypt information read from a memory location 

corresponding to the physical address. 



11. 



The method of claim 10, wherein the secret key is used to encrypt data written 



to the first memory location. 

12. The method of claim 10, wherein the decrypted information is data. 

13. The method of claim 1 0, wherein the decrypted information is an instruction. 

14. The method of claim 10, the retrieving comprising: 

looking up the key tag in a memory mapping table using the virtual address information. 

15. A method for accessing information in a memory, comprising: 
receiving, at a memory management unit, virtual address information from a processor; 
retrieving a key tag and physical address information corresponding to the virtual address 

information; 

sending, from the memory management unit to the processor, a key tag and physical 
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address information corresponding to the virtual address information; 

determining whether a memory location corresponding to the physical address 
information is protected based on the key tag; 

accessing a secret key in a secret key table using the key tag based on the determining; 

and 

decrypting information read from the memory location using the secret key. 

16. A method for loading encrypted information into a memory, comprising: 

determining whether a header associated with a program block includes an encrypted 
secret key; 

decrypting the encrypted secret key to form a decrypted secret key when a result of the 
determination indicates that the header includes an encrypted secret key; 
storing the decrypted secret key in a secret key table; 

assigning the decrypted secret key a key tag for use in retrieving the decrypted secret key 

from the secret key table; 

loading the program block into the memory at a first memory location; and 

associating the key tag with virtual address information and physical address information 

corresponding to the memory location, wherein information read from the first memory location 

is decrypted using the decrypted secret key. 
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17. The method of claim 16, further comprising: 

validating a signature on the decrypted secret key before storing the decrypted secret key 
in the secret key table. 
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1 8 . The method of claim 1 6, further comprising: 

providing a key tag indicating that the program block is unencrypted based on a 
determination that the header does not include the encrypted secret key; 

loading the unencrypted program block into the memory at a second memory location; 

and 

associating the key tag indicating that the program block is unencrypted with virtual 
address information and physical address information corresponding to the second memory 
location. 

1 9. The method of claim 1 6, wherein the decrypted information is an instruction. 

20. The method of claim 16, wherein the decrypted information is data. 

21 . The method of claim 16, wherein data written to the first memory location is 
encrypted using the decrypted secret key. 

22. An apparatus for accessing information in a memory, comprising: 
means for providing virtual address information to a memory management unit; 
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means for obtaining, from the memory management unit, a key tag and physical address 
information corresponding to the virtual address information; 

means for retrieving a secret key using the key tag when it is determined that a memory 
location corresponding to the physical address information is protected; and 

means for decrypting information read from the memory location using the secret key. 

23 . The apparatus of claim 22, the means for retrieving comprising: 

means for looking up the secret key in a secret key table using the key tag based on a 

I 

determination that the memory location is protected. 

24. The apparatus of claim 22, further comprising: 

means for writing unencrypted data to the memory location based on a determination that 
the memory location is unprotected. 
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25. The apparatus of claim 22, further comprising: 

means for reading unencrypted data from the memory location based on a determination 
that the memory location is unprotected. 



26. 



The apparatus of claim 22, further comprising: 



means for executing an unencrypted instruction from the memory location based on a 
determination that the memory location is unprotected. 
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27. The apparatus of claim 22, wherein the decrypted information is an 

instruction, further comprising: 

means for executing the instruction. 



28. 



The apparatus of claim 22, wherein the decrypted information is data. 



29. The apparatus of claim 22, further comprising: 

means for encrypting data written to the first memory location using the secret key. 

30. An apparatus for accessing information in a memory, comprising: 
means for receiving virtual address information from a processor; 

means for retrieving a key tag and physical address information corresponding to the 
virtual address information; and 

means for providing the key tag and physical address information to the processor, 
wherein a secret key associated with the key tag is used to decrypt information read from a 
memory location corresponding to the physical address information. 

3 1 . The apparatus of claim 30, wherein the secret key is used to encrypt data 
written to the first memory location. 



32. 



The apparatus of claim 30, wherein the decrypted information is data. 
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33. 



The apparatus of claim 30, wherein the decrypted information is an 



instruction. 
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34. The apparatus of claim 30, the means for retrieving comprising: 

means for looking up the key tag in a memory mapping table using the virtual address 
information. 

35. An apparatus for loading encrypted information into a memory, comprising: 
means for determining whether a header associated with a program block includes an 

encrypted secret key; 

means for decrypting a secret key based on a result of the determination; 

means for storing the decrypted secret key in a secret key table; 

means for assigning the decrypted secret key a key tag for use in retrieving the decrypted 
secret key from the secret key table; 

means for loading the program block into the memory at a first memory location; and 

means for associating the key tag with virtual address information and physical address 
information corresponding to the memory location, wherein information read from the first 
memory location is decrypted using the decrypted secret key. 

36. The apparatus of claim 35, further comprising: 

means for validating a signature on the decrypted secret key before storing the decrypted 
secret key in the secret key table. 
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37. The apparatus of claim 35, further comprising: 

means for providing a key tag indicating that the program block is unencrypted based on a 
determination that the header does not include the encrypted secret key; 

means for loading the unencrypted program block into the memory at a second memory 

location; and 

means for associating the key tag indicating that the program block is unencrypted with 
virtual address information and physical address information corresponding to the second 
memory location. 

38. The apparatus of claim 35, wherein the decrypted information is an 



instruction. 



39. 



The apparatus of claim 35, wherein the decrypted information is data. 



40. The apparatus of claim 35, wherein data written to the first memory location is 

encrypted using the decrypted secret key. 



41. 



A computer-readable medium containing instructions for performing a method 



for accessing information in a memory, the method comprising: 

receiving, at a memory management unit, virtual address information from a processor; 
retrieving a key tag and physical address information corresponding to the virtual address 
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information; 

sending, from the memory management unit to the processor, a key tag and physical 
address information corresponding to the virtual address information; 

determining whether a memory location corresponding to the physical address 
information is protected based on the key tag; 

accessing a secret key in a secret key table using the key tag based on the determining; 

and 

decrypting information read from the memory location using the secret key. 

42. A computer-readable medium containing instructions for performing a method 

for loading encrypted information into a memory, the method comprising: 

determining whether a header associated with a program block includes an encrypted 
secret key; 

decrypting the encrypted secret key to form a decrypted secret key when a result of the 
determination indicates that the header includes an encrypted secret key; 
storing the decrypted secret key in a secret key table; 

assigning the decrypted secret key a key tag for use in retrieving the decrypted secret key 

from the secret key table; 

loading the program block into the memory at a first memory location; and 

associating the key tag with virtual address information and physical address information 

corresponding to the memory location, wherein information read from the first memory location 

is decrypted using the decrypted secret key. 
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43. An apparatus for accessing infonnation in a memory, comprising: 
a processor; and 

a memory management unit operable to receive a virtual address from the processor, 
5 retrieve a key tag and a physical address corresponding to the virtual address, and send the key 
tag and physical address to the processor, 

wherein the processor receives the key tag and physical address corresponding to the 
virtual address, determines whether a memory location corresponding to the physical address is 
protected based on the key tag, retrieves a secret key using the key tag based on the determining, 
and decrypts information read from the memory location using the secret key. 

44. The apparatus of claim 43, wherein the processor writes unencrypted data to 
the memory location based on a determination that the first memory location is unprotected. 
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45. The apparatus of claim 43, wherein the processor reads unencrypted data from 
the memory location based on a determination that the first memory location is unprotected. 

46. The apparatus of claim 43, wherein the processor executes an unencrypted 
instruction from the memory location based on a determination that the first memory location is 
unprotected. 
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47. The apparatus of claim 43, wherein the decrypted information is an instruction 

and the processor executes the instruction. 
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48. 



The apparatus of claim 43, wherein the decrypted information is data. 



49. The apparatus of claim 43, wherein the processor encrypts data written to the 
memory location using the secret key. 

50. An apparatus for loading encrypted information into a memory, comprising: 
a memory including a program that: determines whether a header associated with a 

program block includes an encrypted secret key; decrypts the encrypted secret key to form a 
decrypted secret key when a result of the determination indicates that the header includes an 
encrypted secret key; stores the decrypted secret key in a secret key table; assigns the decrypted 
secret key a key tag for use in retrieving the decrypted secret key from the secret key table; loads 
the program block into the memory at a memory location; and associates the key tag with virtual 
address information and physical address information corresponding to the memory location, 
wherein information read from the memory location is decrypted using the decrypted secret key; 
and 

a processor that runs the program. 

5 1 . A method for protecting information in a memory, comprising: 
generating a secret key in response to instructions from a program; 
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storing the secret key in a secret key table; 

assigning the secret key a key tag for use in retrieving the secret key from the secret key 
table; and 

associating the key tag with virtual address information and physical address information 
corresponding to a memory location of a program block from the program, wherein information 
read from the memory location is decrypted using the secret key. 
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